bootstrap

Documentation

Index

• func DeleteBootstrapToken(ctx context.Context, c client.Client, csrName string) error
• func MarshalKubeconfigFromBootstrapToken(config *rest.Config, token string) ([]byte, error)
• func MarshalKubeconfigFromBootstrapping(bootstrapClientConfig *rest.Config, privateKeyData, certDat []byte) ([]byte, error)
• func RequestSeedCertificate(ctx context.Context, ...) (certData []byte, csrName string, err error)

Functions

func DeleteBootstrapToken

func DeleteBootstrapToken(ctx context.Context, c client.Client, csrName string) error

DeleteBootstrapToken deletes a bootstrap token that was used to request a certificate.

func MarshalKubeconfigFromBootstrapToken

func MarshalKubeconfigFromBootstrapToken(config *rest.Config, token string) ([]byte, error)

MarshalKubeconfigFromBootstrapToken marshals the kubeconfig derived with the given bootstrap token.

func MarshalKubeconfigFromBootstrapping

func MarshalKubeconfigFromBootstrapping(bootstrapClientConfig *rest.Config, privateKeyData, certDat []byte) ([]byte, error)

MarshalKubeconfigFromBootstrapping marshals the kubeconfig derived from the bootstrapping process.

func RequestSeedCertificate

func RequestSeedCertificate(ctx context.Context, certificateClient certificatesv1beta1client.CertificateSigningRequestInterface, privateKeyData []byte, seedName string) (certData []byte, csrName string, err error)

RequestSeedCertificate will create a certificate signing request for a seed (Organization and CommonName for the CSR will be set as expected for seed certificates) and send it to API server, then it will watch the object's status, once approved by API server, it will return the API server's issued certificate (pem-encoded). If there is any errors, or the watch timeouts, it will return an error. This is intended for use on seeds (gardenlet).